SRC_Tech and cyber risk and Compliance_Senior Associate

Experience with cyber defense technologies such as SIEM, SOAR, and EDR/XDR platforms. 

Familiarity with security operations, including vulnerability management, incident handling, cyber threat intelligence, and proactive threat hunting. 

Ability to track emerging digital business trends and evolving threats to ensure they are incorporated into security strategy and architecture.  

Understanding of secure software development practices (SSDLC) and the ability to integrate security controls throughout the SDLC. 

Experience performing application security assessments, including threat modeling, code reviews, and static/dynamic application security testing (SAST/DAST/SCA). 

Experience with application security tools such as Veracode, Fortify, Checkmarx, SonarQube, Burp Suite, or similar platforms is good to have. 

Proven capability to independently drive cybersecurity and GRC initiatives end-to-end, including assessment, remediation planning, stakeholder alignment, and execution. 

Demonstrated leadership skills and team management capabilities, including providing direction to team members and contributing to effective client management through proactive engagement and issue resolution. 

Proficiency with Microsoft 365 and Microsoft Office Suite (Word, Excel, Access, PowerPoint). 

Good presentation, project management, facilitation and delivery skills as well as strong analytical and problem-solving capabilities. 

Excellent written and verbal communication skills, with the ability to articulate complex concepts clearly and contribute effectively in team settings. 

Consistently communicates and drives objectives using fact-based decision-making that balances risk mitigation with business performance.